Image: d2908q01vomqb2.cloudfront.net · rights & removal
Using AWS WAF to apply mitigations for PHP2Shell RCE vulnerabilities (CVE
Reporting by AWS Security BlogRead the original at aws.amazon.com
AWS Security Blog Using AWS WAF to apply mitigations for PHP2Shell RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619) October 22, 2026: We updated this post to add the AWS WAF PHP application managed rule group. Version 2.3 of the rule group adds the PHP2Shell_BODY rule for CVE-2026-109619, and AWS made it the default version.
